CVE-2026-73238

Mô tả

Tham khảo

• allura.apache.org/posts/2026-allura-1.19.1.html · Release Notes
• lists.apache.org/thread/bbzhnvqlwvwbprnfg4g41s8wkc5bdfmk · Mailing List
• openwall.com/lists/oss-security/2026/08/12/17 · Mailing List

Lỗ hổng khác của allura

• CVE-2026-75099TRUNG BÌNH 5.3Unauthenticated REST disclosure of certain content items in Apache Allura. This issue affects Apache Allura: through 1.19.1. Users are…
• CVE-2026-73240NGHIÊM TRỌNG 9.8Specifically crafted inputs may lead to git argument injection in Apache Allura. This issue affects Apache Allura: before 1.19.1. Users ar…
• CVE-2026-73239TRUNG BÌNH 6.5Insecure Direct Object Reference (IDOR) due to missing permission checks for multiple Artifact types in Apache Allura. This issue affects A…
• CVE-2026-73237TRUNG BÌNH 6.1XSS vulnerability in Markdown handling in Apache Allura. This issue affects Apache Allura: from 1.10.0 before 1.19.1. Users are recommende…
• CVE-2026-69223NGHIÊM TRỌNG 9.1Apache Allura's webhooks are vulnerable to Server-Side Request Forgery (SSRF). This issue affects Apache Allura: before 1.19.1. Users are …